VM-Series Firewall for NSX—If you plan to use WildFire,
the VM-Series firewalls must be able to access wildfire.paloaltonetworks.com on
port 443. This is an SSL connection and the App-ID is paloalto-wildfire-cloud.

The
management interface on the VM-Series firewall uses SSL to communicate
with Panorama over TCP/3978.

vCenter Server The vCenter Server must be able to
reach the deployment web server that is hosting the VM-Series OVA.
The port is TCP/80 by default or App-ID web-browsing.